linux安装dns全过程6,CentOS 6.5下配置DNS过程

CentOS 6.5下配置DNS过程

安装bind

# mount -o loop /root/Downloads/CentOS-6.5-x86_64-bin-DVD1.iso /mnt/DVD

# cd /mnt/DVD

# cd Packages

# ll | grep bind

-r--r--r-- 2 root root 4171112 Aug 28 2013 bind-9.8.2-0.17.rc1.el6_4.6.x86_64.rpm

-r--r--r-- 2 root root 72520 Aug 28 2013 bind-chroot-9.8.2-0.17.rc1.el6_4.6.x86_64.rpm

-r--r--r-- 2 root root 70696 Nov 25 2013 bind-dyndb-ldap-2.3-5.el6.x86_64.rpm

-r--r--r-- 2 root root 910676 Aug 28 2013 bind-libs-9.8.2-0.17.rc1.el6_4.6.i686.rpm

-r--r--r-- 2 root root 899540 Aug 28 2013 bind-libs-9.8.2-0.17.rc1.el6_4.6.x86_64.rpm

-r--r--r-- 2 root root 186584 Aug 28 2013 bind-utils-9.8.2-0.17.rc1.el6_4.6.x86_64.rpm

# rpm -ivh bind-9.8.2-0.17.rc1.el6_4.6.x86_64.rpm

# rpm -ivh bind-chroot-9.8.2-0.17.rc1.el6_4.6.x86_64.rpm

• 配置named.conf

key "rndc-key" {

algorithm hmac-md5;

secret "4Re7AAqoTeAWNLyZUyD1sQ==";

};

controls {

inet 127.0.0.1 port 953

allow { 127.0.0.1; } keys { "rndc-key"; };

};

options

{

// Put files that named is allowed to write in the data/ directory:

directory "/var/named"; // "Working" directory

dump-file "data/cache_dump.db";

statistics-file "data/named_stats.txt";

memstatistics-file "data/named_mem_stats.txt";

//listen-on port 53 { any; };

listen-on port 53 { any; };

//listen-on-v6 port 53 { any; };

listen-on-v6 port 53 { ::1; };

allow-query { any; };

allow-query-cache { any; };

// Enable/disable recursion - recursion yes/no;

recursion yes;

dnssec-enable yes;

dnssec-validation yes;

dnssec-lookaside auto;

bindkeys-file "/etc/named.iscdlv.key";

managed-keys-directory "/var/named/dynamic";

};

logging

{

channel default_debug {

file "data/named.run";

severity dynamic;

};

};

view "localhost_resolver"

{

match-clients { any; };

match-destinations { any; };

recursion yes;

# all views must contain the root hints zone:

zone "." IN {

type hint;

//file "/var/named/named.ca";

file "/dev/null";

};

include "/etc/named.rfc1912.zones";

};

• 配置zone：named.rfc1912.zones，包括正向解析和反向解析

// named.rfc1912.zones:

//

// Provided by Red Hat caching-nameserver package

//

// ISC BIND named zone configuration for zones recommended by

// RFC 1912 section 4.1 : localhost TLDs and address zones

// and http://www.ietf.org/internet-drafts/draft-ietf-dnsop-default-local-zones-02.txt

// (c)2007 R W Franks

//

// See /usr/share/doc/bind*/sample/ for example named configuration files.

//

zone "Oracle.test" IN {

type master;

file "oracle.test.zone";

allow-update { none; };

};

zone "17.168.192.in-addr.arpa" IN {

type master;

file "17.168.192.zone";

allow-update { none; };

};

正向解析文件：

# cat oracle.test.zone

$TTL 86400

@ IN SOA ns.oracle.test. root.oracle.test. (

42 ; serial

3H ; refresh

15M ; retry

1W ; expire

1D ) ; minimum

IN NS ns.oracle.test.

ns IN A 192.168.17.240

node1 IN A 192.168.17.235

node2 IN A 192.168.17.236

node1-vip IN A 192.168.17.237

node2-vip IN A 192.168.17.238

node-scan IN A 192.168.17.239

反向解析文件：

# cat 17.168.192.zone

$TTL 86400

@ IN SOA ns.oracle.test. root.oracle.test. (

1997022700 ; serial

28800 ; refresh

14400 ; retry

3600000 ; expire

86400 ) ; minimum

IN NS ns.oracle.test.

240 IN PTR ns.oracle.test.

235 IN PTR node1.oracle.test.

236 IN PTR node2.oracle.test.

237 IN PTR node1-vip.oracle.test.

238 IN PTR node2-vip.oracle.test.

239 IN PTR node-scan.oracle.test.

配置完控制文件后还要记得生成rndc-key，这里就不再赘述了。

都完成后便可以重启named服务并检查配置了：

# service named restart

# service named status

# nslookup node1

Server: 192.168.17.240

Address: 192.168.17.240#53

Name: node1.oracle.test

Address: 192.168.17.235